Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0aca00c5 by Salvatore Bonaccorso at 2018-06-17T13:55:44+02:00
Add CVE-2017-16005/node-http-signature
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -37500,7 +37500,10 @@ CVE-2017-16007 (node-jose is a JavaScript
implementation of the JSON Object Sign
CVE-2017-16006 (Remarkable is a markdown parser. In versions 1.6.2 and lower,
...)
TODO: check
CVE-2017-16005 (Http-signature is a "Reference implementation of Joyent's
HTTP ...)
- TODO: check
+ - node-http-signature <not-affected> (Fixed before initial upload to
Debian)
+ NOTE: https://github.com/joyent/node-http-signature/issues/10
+ NOTE: https://nodesecurity.io/advisories/318
+ NOTE: nodejs not covered by security support
CVE-2017-16004
RESERVED
CVE-2017-16003 (windows-build-tools is a module for installing C++ Build Tools
for ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0aca00c570fb33b95e4f6ea7674124f84548a7c4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0aca00c570fb33b95e4f6ea7674124f84548a7c4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
